Cloud Native Live: Workload Misconfiguration - The #1 Security Threat When Using Kubernetes
Explore workload misconfiguration, the primary security threat in Kubernetes environments, and learn effective strategies to mitigate risks and enhance cloud-native security.
Extend Falco with Plugins - Trigger Alerts with Any Stream of Events
Learn to extend Falco's capabilities with plugins, enabling custom event streams and alerts. Explore architecture, plugin types, SDK usage, and real-world applications for enhanced cloud-native security monitoring.
Secure Supply Chains with Tekton Chains - CNCF
Learn about Tekton Chains for secure software supply chains, including installation, configuration, and verification of provenance documents.
Your Kubernetes Single-Pane of Glass with Kubescape
Explore Kubescape, a comprehensive tool for Kubernetes security and compliance management, offering a unified view of cluster health and vulnerabilities.
Cloud Native Live - Locking Down Your Cluster
Explore strategies for enhancing Kubernetes cluster security, including best practices, tools, and techniques to protect against vulnerabilities and unauthorized access.
Desktop to Deployment: Kubernetes Security with Checkov
Explore K8s security from desktop to deployment using Checkov. Learn about OS Top 10, CI monitoring, customization, and admission controllers for robust cloud-native security practices.
PolicyReport CRD - Managing Admission Control, Runtime, and Scan Reports
Explore PolicyReport CRD for standardized Kubernetes policy management. Learn about adapters for various engines and discover Policy Reporter's integration capabilities.
Komrade: An Open-Source Security Chaos Engineering Tool for Kubernetes
Explore Security Chaos Engineering (SCE) and its application in Kubernetes with Komrade, an open-source tool for proactively identifying system vulnerabilities through controlled experiments.
Tweezering Kubernetes Resources - Operating on Operators
Explore Kubernetes Operators' security risks, threat modeling, and best practices for secure implementation. Learn to assess third-party Operators and conduct effective code reviews for enhanced cluster safety.
Keep Calm and Containerd On - Migrating Kubernetes Clusters from Docker to Containerd
Explore Intuit's journey migrating 200+ Kubernetes clusters to containerd, addressing challenges in logging, SELinux, GPU support, and cluster addons. Learn valuable lessons for a smooth transition.
Three Surprising Kubernetes Networking Features and How to Defend Against Them
Explore surprising Kubernetes networking vulnerabilities and learn effective defense strategies to protect your clusters from potential attacks and compromises.
How a Couple of Characters and GitOps Brought Down Our Site
Explore how GitOps adoption led to a global outage at Skyscanner, examining challenges, benefits, and key learnings to help prevent similar incidents in cloud-native environments.
SIG Security Update: We Lift Together - Improving Kubernetes Security
Explore Kubernetes security updates, community-building approaches, and collaborative efforts in improving project and user security. Learn about tooling, audits, and documentation initiatives.
Contour Ingress - Introduction and Deep Dive
Explore Contour, a high-performance Kubernetes ingress solution. Learn its features, multi-tenant usage, and roadmap, including Gateway API support and enhanced lifecycle management.
A Treasure Map of Hacking and Defending Kubernetes
Comprehensive guide to Kubernetes security: threat modeling, attack demonstrations, defense strategies, and advanced topics like workload identity and runtime hardening for robust cluster protection.
Cloud Native Live - Litmus Chaos Engine and Microservices Demo App
Explore Litmus Chaos Engine for resilience testing in microservices, featuring a hands-on demo application to enhance cloud-native development skills.
Optimizing Secrets Management - From Integration to Deletion
Improve secrets management lifecycle: integration, creation, rotation, and deletion. Learn strategies for enhancing security and efficiency in handling sensitive information.
Releasing Kubernetes Less Often and More Securely - SIG Release Update
Discover the latest updates from Kubernetes SIG Release, including efforts to enhance security, streamline release processes, and achieve SLSA compliance. Learn about roadmap, vision, and opportunities to contribute.
Falco to Pluginfinity and Beyond - Cloud-Native Runtime Security
Explore Falco's evolution as a cloud-native runtime security project, including its new plugin system for enhanced cloud security and threat detection in Kubernetes environments.
K8s and Active Directory Integration Using Dex - Bridging Authentication Gaps
Learn to integrate Kubernetes with Active Directory using Dex for seamless authentication. Hands-on tutorial covers setting up AD server, configuring Dex LDAP connector, and authenticating access to sample applications.
Kubernetes Repositories and Registries Scanning with Kubescape
Explore Kubescape's capabilities for scanning Kubernetes repositories and registries, enhancing security and compliance in cloud-native environments.